home

KEYLAYOUT.SYS

Keylay00

Yukihiro Fukumura

It runs as a Windows kernel mode device driver named “Keylayout”.
Publisher:
yukihiro  (signed by Yukihiro Fukumura)

Product:
Keylay00

Description:
Keyboard layout driver

Version:
3.3.0.0

MD5:
d624a193b443cba9d2ff923a72bdb827

SHA-1:
864f731a95ba3142d17dd7e5d0407f682bb92659

SHA-256:
4a5f62171214f2a3110b9ea305365f0dd620e871bc45a2eff929f036f464bcf0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/1/2024 6:31:23 AM UTC  (today)

File size:
22.4 KB (22,944 bytes)

Product version:
3.3.0.0

Copyright:
Copyright(C) 1995-2012 by yukihiro

Original file name:
KEYLAYOUT.SYS

File type:
Driver (Win32 SYS)

Common path:
C:\Windows\System32\drivers\keylayout.sys

Digital Signature
Signed by:
Yukihiro Fukumura

Authority:
GlobalSign nv-sa

Valid from:
5/26/2014 7:02:36 PM

Valid to:
5/26/2017 7:02:36 PM

Subject:
CN=Yukihiro Fukumura, C=JP

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11215593BBB9E505EAFF42B5C967799311B8

File PE Metadata
Compilation timestamp:
9/21/2014 9:09:32 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
384:Q8oInO30L5RLJvpCrfAzwa83Nq7nLrWMQMcPLLiZIdYBrtz:PouO30L5DpKeZ89O/L+ODrtz

Entry address:
0x903E

Entry point:
8B, FF, 55, 8B, EC, E8, BD, FF, FF, FF, 5D, E9, 5A, 88, FF, FF, CC, CC, 78, 90, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 7A, 92, 00, 00, 00, 30, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, D0, 90, 00, 00, E2, 90, 00, 00, 00, 91, 00, 00, 12, 91, 00, 00, 24, 91, 00, 00, 34, 91, 00, 00, 44, 91, 00, 00, 5A, 91, 00, 00, 64, 91, 00, 00, 7C, 91, 00, 00, 94, 91, 00, 00, AA, 91, 00, 00, BA, 91, 00, 00, D2, 91, 00, 00, EE, 91, 00, 00, 02, 92, 00, 00, 10, 92, 00, 00, 28, 92...
 
[+]

Entropy:
6.4928

Code size:
8.5 KB (8,704 bytes)

Driver
Display name:
Keylayout

Type:
Kernel device driver (KernelDriver)


Scan KEYLAYOUT.SYS - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.